CVE-2014-1839
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-c...
Original description
The description as published by the source.
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2014-1839 logilab-common Fixed in: 0.61.0-1
References
- advisory secunia.com
- web comments.gmane.org
- web lists.opensuse.org
- web logilab.org
- web bugs.debian.org